CVE-2021-28547CWE-20
Adobe Creative Cloud for macOS Privilege Escalation Vulnerability
High · published September 29, 2021
What it is
Adobe Creative Cloud Desktop Application for macOS version 5.3 (and earlier) is affected by a privilege escalation vulnerability that could allow a normal user to delete the OOBE directory and get permissions of any directory under the administrator authority.
The record
Technical detail
- CVSS v3.0
- 7.8 · HIGH
- Vector
- CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00520 · 43.3th percentile
- Weakness
- CWE-20 · Improper Input Validation
- Published
- 2021-09-29T15:45Z
EPSS history
Timeline